{"action":"Upgrade openssl-src to 300.0.12 or later.","affected":[{"fixed":"300.0.12","introduced":"300.0.0"}],"component":"openssl-src","cve_ids":["CVE-2022-3996"],"ecosystem":"crates.io","epss":0.01312,"exploited":false,"fixed_versions":["300.0.12"],"ghsa_id":"GHSA-vr8j-hgmm-jh9r","id":"tcs_01M5KF3QBM2A0TTBGD9NQTWAEZ","modified_at":"2026-09-10T03:49:50.494201995Z","published_at":"2022-12-13T18:30:33Z","references":["https://osv.dev/vulnerability/GHSA-vr8j-hgmm-jh9r","https://nvd.nist.gov/vuln/detail/CVE-2022-3996","https://github.com/openssl/openssl/commit/7725e7bfe6f2ce8146b6552b44e0d226be7638e7","https://github.com/alexcrichton/openssl-src-rs","https://www.openssl.org/news/secadv/20221213.txt"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-vr8j-hgmm-jh9r","url":"https://osv.dev/vulnerability/GHSA-vr8j-hgmm-jh9r"}],"summary":"Denial of service by double-checked locking in openssl-src"}